CVE-2023-6793Medium

CVE-2023-6793 PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

Published
December 13, 2023
Last Modified
December 13, 2023

🔗 CVE IDs covered (1)

CVE-2023-6793 →

📋 Description

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

🎯 Affected products3

  • PAN-OS
  • Prisma Access
  • Cloud NGFW

✅ Remediation

This issue is fixed in PAN-OS 9.0.17-h4, PAN-OS 9.1.17, PAN-OS 10.1.11, PAN-OS 10.2.5, PAN-OS 11.0.2, and all later PAN-OS versions. Workarounds and mitigations: This issue requires the attacker to have authenticated access to the PAN-OS XML API. You can mitigate the impact of this issue by following the Best Practices for Securing Administrative Access in the PAN-OS technical documentation at https://docs.paloaltonetworks.com/best-practices.

🔗 References (1)